AI Security Architect — Data Security & DSPM

• Sr AI Security Architect
• Remote, USA [CST]
• Contract

Experience Level: 7-12 years

• Senior AI Security Architect — Data Security & DSPM
• Combined senior hire carrying two Critical security scopes
• Role Summary
• Own the end-to-end security architecture for Alcon's Agentic AI platform and carry the data-security mandate for AI. This senior role consolidates two Critical scopes — agentic AI security architecture and Data Security Posture Management (DSPM) — into a single accountable owner who designs the secure platform and protects the data flowing through it.
• Key Responsibilities
• Define and own the agentic AI reference security architecture (v1 and beyond), including Platform 1.0 hardening.
• Stand up and operate Microsoft Purview DSPM for AI, accelerated via Microsoft FastTrack.
• Establish the sensitivity-label and ML auto-classification baseline; map and govern data flows into and out of agents.
• Set architecture standards for agent-to-API and agent-to-data access patterns.
• Design and secure agentic AI workloads across a multi-cloud estate spanning Azure and AWS, ensuring consistent controls regardless of where agents are built and run.
• Partner with the identity, AppSec, and GRC functions to ensure controls are designed in, not bolted on.
• Required Skills & Qualifications
• Deep Azure / M365 security architecture experience; Microsoft Sentinel, Entra, Defender for Cloud.
• Hands-on understanding of how to build and secure agents in a multi-cloud setup, including AWS (e.g., Bedrock Agents, AWS Lambda, IAM) alongside Azure.
• Hands-on Microsoft Purview — DSPM for AI, sensitivity labels, data-flow mapping, ML-based auto-classification.
• API and agent architecture security; familiarity with Copilot Studio / agent platforms.
• Proven track record designing enterprise-scale secure architectures in a regulated environment.
• Preferred Qualifications
• Experience in life sciences, medical device, or other regulated manufacturing.
• Relevant certifications (e.g., CISSP, Azure Security Engineer, SC-100).